https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 13:01:05 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0463 certfr-2026-avi-0463 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0463 https://cve.radiocsirt.org/vuln/euvd-2026-278519 EUVD-2026-278519 https://cve.radiocsirt.org/vuln/euvd-2026-278519 https://cve.radiocsirt.org/vuln/fkie_cve-2026-34445 <p>Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, the ExternalDataInfo class in ONNX was using Python’s setattr() function to load metadata (like file paths or data lengths) directly from an ONNX model file. It didn’t check if the &#34;keys&#34; in the file were valid. Due to this, an attacker could craft a malicious model that overwrites internal object properties. This issue has been patched in version 1.21.0.</p> <p>Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, the ExternalDataInfo class in ONNX was using Python’s setattr() function to load metadata (like file paths or data lengths) directly from an ONNX model file. It didn’t check if the &#34;keys&#34; in the file were valid. Due to this, an attacker could craft a malicious model that overwrites internal object properties. This issue has been patched in version 1.21.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-34445 https://cve.radiocsirt.org/vuln/ghsa-538c-55jv-c5g9 <p><strong>Affected:</strong> PyPI: onnx</p> <p>### Summary The ExternalDataInfo class in ONNX was using Python’s setattr() function to load metadata (like file paths or data lengths) directly from an ONNX model file. The problem? It didn’t check if the &#34;keys&#34; in the file were valid. Because it blindly trusted the file, an attacker could craft a malicious model that overwrites internal object properties.</p> <p>### Why its Dangerous **Instant Crash DoS**: An attacker can set the length property to a massive number like 9 petabytes. When the system tries to load the model, it attempts to allocate all that RAM at once, causing the server to crash or freeze Out of Memory.</p> <p>**Access Bypass**: By setting a negative offset -1, an attacker can trick the system into reading parts of a file it wasn&#39;t supposed to touch.</p> <p>**Object Corruption**: Attackers can even inject &#34;dunder&#34; attributes like __class__ to change the object&#39;s type entirely, which could lead to more complex exploits.</p> <p>**Fixed**: https://github.com/onnx/onnx/pull/7751 object state corruption and DoS via ExternalDataInfo attribute injection</p> <p><strong>Affected:</strong> PyPI: onnx</p> <p>### Summary The ExternalDataInfo class in ONNX was using Python’s setattr() function to load metadata (like file paths or data lengths) directly from an ONNX model file. The problem? It didn’t check if the &#34;keys&#34; in the file were valid. Because it blindly trusted the file, an attacker could craft a malicious model that overwrites internal object properties.</p> <p>### Why its Dangerous **Instant Crash DoS**: An attacker can set the length property to a massive number like 9 petabytes. When the system tries to load the model, it attempts to allocate all that RAM at once, causing the server to crash or freeze Out of Memory.</p> <p>**Access Bypass**: By setting a negative offset -1, an attacker can trick the system into reading parts of a file it wasn&#39;t supposed to touch.</p> <p>**Object Corruption**: Attackers can even inject &#34;dunder&#34; attributes like __class__ to change the object&#39;s type entirely, which could lead to more complex exploits.</p> <p>**Fixed**: https://github.com/onnx/onnx/pull/7751 object state corruption and DoS via ExternalDataInfo attribute injection</p> https://cve.radiocsirt.org/vuln/ghsa-538c-55jv-c5g9 https://cve.radiocsirt.org/vuln/msrc_cve-2026-34445 msrc_CVE-2026-34445 https://cve.radiocsirt.org/vuln/msrc_cve-2026-34445 https://cve.radiocsirt.org/vuln/pysec-2026-2240 <p><strong>Affected:</strong> PyPI: onnx</p> <p>Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, the ExternalDataInfo class in ONNX was using Python’s setattr() function to load metadata (like file paths or data lengths) directly from an ONNX model file. It didn’t check if the &#34;keys&#34; in the file were valid. Due to this, an attacker could craft a malicious model that overwrites internal object properties. This issue has been patched in version 1.21.0.</p> <p><strong>Affected:</strong> PyPI: onnx</p> <p>Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, the ExternalDataInfo class in ONNX was using Python’s setattr() function to load metadata (like file paths or data lengths) directly from an ONNX model file. It didn’t check if the &#34;keys&#34; in the file were valid. Due to this, an attacker could craft a malicious model that overwrites internal object properties. This issue has been patched in version 1.21.0.</p> https://cve.radiocsirt.org/vuln/pysec-2026-2240 https://cve.radiocsirt.org/vuln/rhsa-2026:65126 <p>crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing org.eclipse.parsson/parsson: Eclipse Parsson: Denial of Service via uncontrolled resource consumption in JSON parsing undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames nltk: NLTK: Information disclosure via path traversal vulnerability brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity vertx-core: Eclipse Vert.x: Information disclosure via improper handling of HTTP 30x redirects guardrails-detectors: guardrails-detectors: Unauthenticated Regular-Expression Denial of Service (ReDoS) via detector_params.regex guardrails-detectors: guardrails-detectors: SSRF and local file read via user-supplied XML Schema (xml-with-schema:) trustyai-service-operator: trustyai-service-operator: TAS internal Service bypasses kube-rbac-proxy, exposing unauthenticated Quarkus API cluster-wide odh-dashboard: odh-dashboard: Backend port 8080 trusts x-forwarded-access-token without origin validation data-science-pipelines-operator: DSPO: Operator ClusterRole grants…</p> <p>crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing org.eclipse.parsson/parsson: Eclipse Parsson: Denial of Service via uncontrolled resource consumption in JSON parsing undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames nltk: NLTK: Information disclosure via path traversal vulnerability brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity vertx-core: Eclipse Vert.x: Information disclosure via improper handling of HTTP 30x redirects guardrails-detectors: guardrails-detectors: Unauthenticated Regular-Expression Denial of Service (ReDoS) via detector_params.regex guardrails-detectors: guardrails-detectors: SSRF and local file read via user-supplied XML Schema (xml-with-schema:) trustyai-service-operator: trustyai-service-operator: TAS internal Service bypasses kube-rbac-proxy, exposing unauthenticated Quarkus API cluster-wide odh-dashboard: odh-dashboard: Backend port 8080 trusts x-forwarded-access-token without origin validation data-science-pipelines-operator: DSPO: Operator ClusterRole grants…</p> https://cve.radiocsirt.org/vuln/rhsa-2026:65126 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-34445 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: onnx, Ubuntu:Pro:24.04:LTS: onnx, Ubuntu:25.10: onnx, Ubuntu:26.04:LTS: onnx</p> <p>Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, the ExternalDataInfo class in ONNX was using Python’s setattr() function to load metadata (like file paths or data lengths) directly from an ONNX model file. It didn’t check if the &#34;keys&#34; in the file were valid. Due to this, an attacker could craft a malicious model that overwrites internal object properties. This issue has been patched in version 1.21.0.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: onnx, Ubuntu:Pro:24.04:LTS: onnx, Ubuntu:25.10: onnx, Ubuntu:26.04:LTS: onnx</p> <p>Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0, the ExternalDataInfo class in ONNX was using Python’s setattr() function to load metadata (like file paths or data lengths) directly from an ONNX model file. It didn’t check if the &#34;keys&#34; in the file were valid. Due to this, an attacker could craft a malicious model that overwrites internal object properties. This issue has been patched in version 1.21.0.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-34445